Authentication Bypass in Slican Telephone Exchanges

CVE-2026-35087

What is CVE-2026-35087?

Slican telephone exchanges have a vulnerability that allows attackers to bypass the authentication required for administrative protocols. By executing a specific command, an unauthorized individual can gain access without providing any login credentials. This flaw affects various versions of Slican products, with critical fixes provided in later updates. However, users of older End-Of-Life models, discontinued in 2011 and 2012, remain vulnerable as they will not receive any further software updates. It is recommended that users of these models contact the service department to discuss potential hardware upgrades to mitigate this risk.

References